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We develop a timed calculus for Mobile Ad Hoc Networks embodying the peculiarities of local 
broadcast, node mobility and communication interference. We present a Reduction Semantics and a 
Labelled Transition Semantics and prove the equivalence between them. We then apply our calculus 
to model and study some MAC-layer protocols with special emphasis on node mobility and commu- 
nication interference. 

A main purpose of the semantics is to describe the various forms of interference while nodes change 
their locations in the network. Such interference only occurs when a node is simultaneously reached 
by more than one ongoing transmission over the same channel. 



1 Introduction 



Mobile ad hoc networks (MANETs) are complex distributed systems that consist of a collection of 
wireless mobile nodes that can dynamically self-organize into arbitrary network topologies, so as to allow 
people and devices to seamlessly interwork in areas without pre-existing communication infrastructures 
ifTTl . Owing to the flexibility and convenience, their applications have been extended from traditional 
military domain to a variety of commercial areas, e.g., ambient intelligence [2], personal area networks 
[4] and location-based services Q. 

Wireless nodes use radio frequency channels to broadcast messages. Compared to the conventional 
wired-based broadcasts like Ethernet networks, this form of broadcast has some special features. First, 
broadcasting is local, i.e., a transmission covers only a limited area, called a cell, and hence reaches a 
(possibly empty) subset of the nodes in the network. Second, channels are half-duplex: on a given chan- 
nel, a node can either transmit or receive, but cannot do both simultaneously. As a result, communication 
interference can only be detected at the destination. Further, nodes in MANETs can move arbitrarily, 
which makes the network easily suffer from interference. Since interference plays an important role in 
evaluating the performance of a network, it becomes a delicate aspect of MANETs that is handled by a 
great quantity of protocols (e.g., MACA/R-T|5lD. 

Over the last two decades, a number of process calculi have been proposed to model MANETs 
@|7l|8l|9l[T0l[n][l2j[T3l[l4j[T5l. These calculi can be divided into two categories according to their 
attentions to the network. The first group contains CBS# 0, CMAN $7\\M, RBPT flU, CNT fl9j, CMN 
ifTTTl . ft)-calculus lfT3l and CSDT 031. They attempt to depict local broadcast and node mobility. Take 
CMN as an example, each node is equipped with a location and a radius that define the cell over which 
the node can transmit. When a sender broadcasts messages, only nodes that are within its transmission 
cell could receive. Furthermore, nodes are marked mobile or stationary, and mobile nodes can change 
their locations randomly. Then CWS |[T2l and TCWS [ 14] constitute the second group. They focus on 
local broadcast and communication interference. The former abstracts the transmission into two state 
change events: begin transmission and end transmission, while the latter regards the transmission as a 
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time consuming procedure. To our knowledge, no calculus has integrated all of the three peculiarities, 
especially including node mobility and communication interference. 

In this paper, we present a timed calculus for mobile ad hoc networks (TCMN), which extends CWS 
lfl2l and deals with all of the three issues. A central concern of our calculus is to describe the forms of 
interference while nodes move their locations in the network. Towards local broadcast, we write n[Q]f r 
to stand for a node identified by n, located at I, executing process Q, and which can transmit data over 
channel c in a cell centered at I with radius r. As for node mobility, measures vary according to the 
specific situation. For instance, nodes that presently participate in no transmission could move arbitrarily 
without any impact on the environment. However, the movement of an active transmitter may affect 
the receptions of active receivers: some may get an error or interference, since they passively leave or 
enter the transmitter's transmission cell. Finally, with regard to communication interference, we assume 
all wireless nodes have been synchronized by some clock synchronization protocol [16, 17 ]. Then we 
consider a transmission proceeds in discrete steps which are represented by occurrences of a simple 
action a to denote passing of one time unit. And if a receiver is exposed to more than one ongoing 
transmission over the same channel, it detects an interference. 

In concurrency theory, Labelled Transition Semantics (LTS) is the most popular way of giving opera- 
tional semantics since the transitions of a LTS expose the full behavior of the system (its internal activities 
as well as the interactions with the environment) which is required for defining behavioral equivalences 
and providing powerful proof techniques. However, sometimes the rules of a LTS may be difficult to 
understand particularly when the calculi relates to node mobility like EUlOlQTl. Hence, a different form 
of operational semantics, named Reduction Semantics (RS), is introduced. RS only concerns the internal 
activities of a system, so it is easier to grasp. Besides, RS can be used to check the correctness of a LTS, 
by proving consistency with the LTS. For these reasons, we define both RS and LTS semantics for our 
TCMN and prove that they coincide. 

We end this section with an outline of the paper. In Section 2, we define the syntax of our core 
language. Then in Section 3, we provide a RS for our calculus which specifies how an unbounded number 
of system components can be involved in an atomic interaction. Next a LTS that captures all the possible 
interactions of a term with its environment is proposed in Section 4. The equivalence between the RS 
and the LTS semantics is proved in Section 5. In Section 6 and 7, we extend our core language by adding 
some new operators to model some MAC-layer collision avoidance protocols: CSMA and MACA/R-T. 
We prove that the CSMA protocol doesn't solve the issue of node mobility while the MACA/R-T protocol 
is robust against node mobility. Finally, in section 8, we summarize our contributions and present the 
future work. 

2 The Core Language 

In Table 1, we present the core of TCMN. The syntax is defined in a two-level structure: a lower 
one for processes which describes the possible status of a node, and an upper one for networks. For easy 
understanding, in this section we only focus on those operators that are necessary for communication 
while the extended language will be presented in Section 6. 

Generally, we use letters a...c for channels, m...o for identifiers, x...z for variables, u for values that 
can be transmitted over channels: these include variables and closed values, and v for closed values, i.e. 
values that contain no variables, £u) is a unary function designed to estimate the number of time units 
required for the transmission of the value u. Since only closed values will be used in transmissions, we 
assume the existence of an evaluation function [[[.]]] to return the closed form of a value. Finally, we do 
not set how locations should be specified, the only assumption is that they should be comparable, so to 
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Table 1. The Syntax 



Networks: 








def 

N = 


empty network 


1 n[Q]f >r 


node 


| N|N 


parallel composition 




Processes: 








def 

Q = P 


non-active process 


1 A 


active process 


p d ^ f o 


termination 


| out(u).P 


output 


| in(x).P 


input 






A d ^ f (v) 5 .P 


active output 


1 (X)v 5 -P 


active input 


Values: 








def 
U = X 


variable 


V 


closed value 


Functions: 








c def n ^ 

f = 


time function 


1 M 


evaluation function 


1 d(li,l 2 ) 


distance function 







determine whether a node is in or out of the transmission cell of another node. We do so by introducing 
a function d which takes two locations as parameters and returns the distance between them. 

Networks are collections of nodes (which actually represent devices) that run in parallel and use 
same channels to communicate with each other. We use the symbol to stand for the empty network, 
and n[Q]f r to denote a node identified by n, located at I, executing process Q, and which can transmit 
data over channel c in a cell centered at I with radius r. We write N | N to indicate a parallel composition 
of two sub-networks N. 

Processes, living within the nodes, are sequential. For convenience, we divide processes into two 
categories: non-active and active. An active process is a process that is currently transmitting or receiving 
data, e.g., an active output process (v) 5 .P denotes a transmitting process, and its transmission of value v 
will complete after 8 time units. Similarly, an active input process (x)^.P represents a receiving process, 
and its reception of value v will last for the next 8 instants of time. In the non-active process constructs, 
the symbol stands for a terminated process, out(u) . P is an output process willing to broadcast the value 
v = [[[u]]], and once the transmission starts, the process evolves into the active output process (v) 5 .P, 
where 8 = '[u^ is the time necessary to transmit the value v. in(x).P indicates an input process willing 
to receive data, and when the beginning of a transmission v in the following 8 time units is captured 
clearly (i.e. without interference), the process becomes the active input process (x)^.P. A node with an 
active output process inside is named active transmitter. Similarly, active input processes and non-active 
processes are included separately in active receivers and non-active nodes. 

We assume that each node has a unique identifier, and different nodes cannot be located at the same 
position at the same time. We consider such networks well-formed. Since nodes cannot be created or 
destroyed, the well-formedness of a network is always preserved as the network evolves. In the remainder 
of the paper, all networks are well formed, and we use a number of notational conventions. Process Q 
stands for either a non-active or an active process while P and A represent non-active and active processes 
separately. We identify (v) 5 .P = P and (x)^.P = P{v/x} if 8 = 0. We write out(u) for out(u).0, and 
(v) 5 for (v) 5 .0. 
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3 Reduction Semantics 

In this section, we study the reduction semantics (RS) for TCMN. In the literature [12], the only 
internal activity is a broadcast which is modelled by two events: begin transmission event and end trans- 
mission event. Yet in our system, a new type of internal activity: a migration is appended to depict node 
movement. In our model, the broadcast will be described by a begin transmission event and several time 
passing events (as shown in Table 2), while the migration will be represented by a node movement event 
from a specific node (as shown in Table 3). Among these three types of events, the begin transmission 
event (i.e. a node initiates a transmission) has the same meaning as that in [12], while the time passing 
event (i.e., a unit of time delays) is imported to replace the end transmission event in [12], and the node 
movement event (i.e., a node moves from one location to another) is a newly added event. 

In our RS for core TCMN, a reduction denotes either a begin transmission event, or a time passing 
event, or a node movement event. In order to handle the interaction among an unbounded number of 
processes, we use rule schemas instead of simple rules to demonstrate the reductions. Also, since a 
reduction, e.g. a begin transmission event, cannot be performed inside arbitrary contexts: one should 
guarantee that the current context meets the specific conditions, the minimal information about the com- 
munication is attached to the reduction. Further, in order to model communication interference, we store 
all the needed active transmitters' information in a global set T which displays in any reduction to deter- 
mine whether a node is simultaneously reached by more than one transmission over the same channel. 
For this reason, the reduction semantics is named RST: RS with parameter T. The component T is a set 
of triples (I, r,c) with each l,r,c in a triple represents location, radius and channel of an active transmitter 
separately. For simplicity, the semantics does not automatically update the set T. Therefore, when a 
reduction is performed, the new T which will be used in the next one has to be manually computed. 
However, it is not difficult to modify the rules so that they also produce the new T. 

As usual in process calculi, the reduction semantics relies on an auxiliary relation, called structural 
congruence, denoted by =, to allow the manipulation of the term structure so as to bring the participants 
of a potential interaction into contiguous positions. Here we define a smallest congruence including 
associativity, commutativity and identity over the empty network: 

N|(N'|N") = (N|N')|N" N|N' = N'|N N|0 = N 

Next are some useful notations that will be used in RST: 

• T||, C is the subset of the active transmitters T whose transmissions are synchronized on channel c 
and can reach a node located at I. Formally, 

T|i, c = {(l / ,r / ,c')|(l / ,r',c')GTAd(r,l)<r'Ac' = c} 

• (I, r, c) -j^N holds if Network N contains no input nodes n[in(x).P]j; r , or n [(x)*.P]f y for which 
d(ljl') < r is true (i.e., a transmission from a node located at I, with radius r, synchronized on c 
reaches no input nodes in N). 

• (I, r, c) J^aiN holds if Network N contains no active input nodes n[(x)^.P]p r , for which d(l, I') < r 
is true (i.e., a transmission from a node located at I, with radius r, synchronized on c reaches no 
active input nodes in N). 

Let's explain the rules in Table 2 and 3. Rule RST-BEGIN is used to derive begin transmission 
reduction. As in lH2l . it rewrites atomically an output node n[out(u).P]f r which is intending to initiate a 
transmission and all the receiver nodes that are not only in its transmission cell but also synchronized on 
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Table 2. Reduction Semantics - Begin transmission and time passing event 

[RST-BEGIN] [RST-PASS-NULL] 

Vh€lUJUK.d(l,l h )<r Viel.T||., c =0 VjeJ.T||. iC ^0 

Tl>n[out<u>.P]^J n n h [in(x h )P h ]f I n n k [(x k )^.P k ]f > ^ 

' heluJ h h keK k>k • 

n[<M> iuJ -P]!; r lnni[(x,)^.Pi]5 in |nnj[in(xi).Pj]f | n n k [P k {±/x„}]f 

iel "> jeJ J ' keK k k 

[RST-SENDING] [RST-PASS-NA] 

5>0 Vi6l.d(l,lj)<r 



T>n[<v)*.P]f r |nni[(x,)«.Pi]j; n ^ ff n[<v>«-l.P]f r | n niKxi)?" 1 .?^ r . 

iel iel 11 



T>n[P]f_ r ^«n[P]f ir 



[RST-CONT] [RST-CONT-PASS] [RST-CONGR] 



T>N^ r N' (l,r,c)^N" T>N L -> <T N J T>N"^ g l\T N=N' T>N'^ & N" N"=N" 
T>N|N"^f; r N'|N" T>N|N"--> <T N'|N'" T>N^ & N"' 



the same channel c. After this reduction, the output process evolves into ([[[u]]])^.P indicating an active 
output process that will transmit the evaluation result [[[u]]] of value u in the following time units. The 
effect of the begin transmission event on each receiver varies according to the structure of each receiver 
and the set T. There are three different situations, corresponding to the sets I, J and K. Processes in I 
represent normal inputs. Since their environments are silent (T|| i C = 0), they become active inputs of 

the form (xj)^.Pi and start receiving data [[[u]]] for the next time units. By contrast, for processes 
in J, as they are currently reached by at least one other transmission (T||. ;C / 0), they could not receive 
the begin transmission event clearly and stay idle. Finally, processes in K are active inputs, i.e., they 
are receiving another transmission, so the new begin transmission event causes interference, denoted by 
receiving symbol _L. 

Rule RST-SENDING deals with the time passing event for active processes. Initially, the active 
output process (v) 5 .P requires 8 time units to complete the date transmission. After a time interval, 
the remaining time would be 8 — 1 units for both sender and receivers. Meanwhile rule RST-PASS- 
NA and RST-PASS-NULL handle the time passing event for non-active processes and empty networks 
respectively. No matter how time flies, they remain unchanged. 

Rule RST-MOVE-AO, RST-MOVE-AI1, RST-MOVE-AI2, RST-MOVE-AI3, and RST-MOVE-NA 
are all used to describe node movements. In RST-MOVE-AO, an active transmitter moves from I to I'. 
Then for active receivers in set I, as they are always reachable no matter from I or I', they continue to 
receive data normally. As for active receivers in set J, since they are reachable from I but not from I', 
they get an error, represented by a special sign e. Finally, active receivers in set K, which are reachable 
from I' but not from I, are receiving another transmission, so the newly joined transmitter will make them 
get interference. Rule RST-MOVE-AI1, RST-MOVE-AI2 and RST-MOVE-AI3 depict all the different 
movements of an active receiver. In RST-MOVE-AI1, the active receiver moves from I to I' which makes 
the original transmission no longer receivable, hence it gets an error. While in RST-MOVE-AI2, although 
the active receiver moves from I to I', it has always been in the transmitter's transmission cell and there 
is no more active transmitter in I', so the active receiver remains unchanged. On the contrary, in RST- 
MOVE-AI3, when the active receiver arrives at I', some other transmissions in I' interfere with its original 
one. As a result, the active receiver obtains an interference. Rule RST-MOVE-NA is straightforward, for 
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Table 3. Reduction Semantics - Node movement event 



[RST-MOVE-AO] 

Vi6l.d(l,l i )<rAd(l / ,l i )<r VjgJ.d(l,lj)<rAd(l / ,l j )>r Vk6K.d(U k )>rAd(l',l k )<r 
T>n[(v>«.P]f r | n n h [(x h )^P h ]f |nn k [(4.P k ]f 4f, 

' heluj h h k<=K k ' k ' 

n[<v>«.P]p ir |nni[(xi)«.P|]J ir| |nnj[Pj{e/x,}]f | FI n k [P k {±/x k }]f 

[RST-MOVE-AI1] 

d(l,li)<r i Ad(l'.l i )>r i 

T>n[(x)«.P]f ir |n I [<v>*.P]^ n ^n[P{e/x}]f )r |n I [<v>«.P]|j ir . 

[RST-MOVE-AI2] 

d(l,l i )<r i Ad(l',l i )<r i T| U =T||, C 
T>n[(x)^P]J;> 1 [<v>«.P]j: in ^n[(x)*.P]=, ir |n r [(v)«.P]J: in 

[RST-MOVE-AI3] 

d(l,li)<r i Ad(l',l i )<r i VjGj.d(U J )>r j Ad(l',l J )<r J T| |/c =T|| iC UJ 

T>n[(x)*.P]f ;>i[<v> a .P]j! |nnj[(vj>^.Pj]j; <r ^n[P{±/*}]t r \n-M s .P]Z J II "j [(v^i .Pjtf 
1 jeJ ' ' iPJ ! ■ 



[RST-MOVE-NA] [RST-CONT-MOVE] [RST-CONT-INT] 

T>N^,, r N' (l,r,c)fcN"A(l',r,c)# ai N" T >N^N' 



non-active nodes, their movement will not affect the environment, therefore they can move arbitrarily 
without any limitations and changes. 

Rule RST-CONT, RST-CONT-PASS, RST-CONT-MOVE and RST-CONT-INT are closure rules 
with regard to different reduction forms (^->f r , ^■ a , "—t^i r , and In RST-CONT, it provides a closure 
under contexts that do not contain receivers in the transmission cell of the transmitter. Similarly, rule 
RST-CONT-MOVE presents a closure under contexts that have never contained active receivers in the 
transmission cell of the transmitter when the transmitter moves from I to I'. Rule RST-CONT-INT is 
analogous to the previous two except that it concerns internal events (i.e., a node movement event from 
an active receiver or a non-active node). Rule RST-CONT-PASS is the time synchronization, it defines a 
closure under contexts that are also affected by the time passing event. 

The last rule, RST-CONGR is a closure rule under structural congruence, where ranges over 
^->f r , > a , r an d ^ for some c, I, I' and r. 



4 Labelled Transition Semantics 

We divide our Labelled Transition Semantics (LTS) into two set of rules corresponding to the two- 
level structure of our language. Table 4 contains the rules for the processes, while Table 5 and 6 presents 
those for the networks. 

In the process semantics, a transition has the form Q A Q', where the grammar for a is: 

a := !v : 8 I ?v : 8 I ?_L I ?e I a 
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Table 4. Labelled Transitions for Processes 



M=v M=s [p S . 0UT ] |>o [PS-OUT iend ] 

5>0 



[PS-IN^ M ] — " _ lD [PS-IISU cgh , e ] 



in(x).P^(x)«.p L ^"' J (xtf.P^M^.P 



= [PS-IN waif ] - [PS-\N interfere ] 

in(x).P— >in(x).P (x)«.P— >P{±/x} 



w [PS-IN err ] -^[PS-PASS] " £{?v:5 ' ?e g ?±} Q ^ IQ [PS-NOIN] 

(x)«.P-^P{e/x} L P^P L Q->Q 

where IQ is the set of processes of the form in(x).P or (x)^.P 



Label !v : 8 represents a begin transmission event (i.e., a transmission of value v in the following 8 time 
units) is initiated by Q which then evolves into Q'; ?v : 8 indicates a begin transmission event reaches 
Q and makes the process transform into Q'; Analogously, ?_L and ?£ stand for an interference or error 
arrives; finally, a means a time passing event. 

Explanations for the rules in Table 4 are as follows: in PS-OUT/,^,-,,, the output process calculates 
the value u and initiates the transmission of the result v in the next 8 time units; in PS-INfo e g in , the input 
process successfully becomes involved with the transmission of value v for the next 8 instants of time; 
in PS-OUT seni i and PS-IN receiV g, with the time passing by, the remaining transmission time is decreasing; 
in PS-IN wai ;, the input process stays idle since it could not receive the begin transmission event clearly; 
in PS-IN interfere and PS-IN err , an active input process encounters an interference or error in its reception, 
and hence stops receiving; Rule PS-PASS shows that the non-active process would never change as time 
goes by, and PS-NOIN demonstrates that the non-input processes would never respond to the reception 
of events. 

Following are some useful mathematical symbols in LTS: 

• d(U') < r'od(U") < r' = (d(l,l') < r'Ad(U") < r')V(d(l,l') > r'Ad(l,l") > r'). 

• T|| c — T||/ c is the set of elements that are contained in T|| c but not in T||/ c . 

• T|i jC C T||/ jC holds only if T|| c is a proper subset of T|k jC . 

In the network semantics, transitions are of the form T>n4n' where T is the same as in Section 
3. Let's comment on the rules in Table 5 and 6. Rule NS-OUT, NS-INi, NS-IN 2 and NS-IN 3 concern 
the communication between a transmitter and its receivers. Rule NS-OUT shows that a node initiates a 
transmission. Then rule NS-INi describes the behavior of a node that is within the transmission cell and 
could hear the begin transmission event clearly, whereas NS-IN2 handles those that detect conflicts. Rule 
NS-IN3 demonstrates that a node would not react to transmissions that are beyond its reception range or 
not in its listening channel. 

Next rules NS-MOVE fl0 , NS-MOVE,„i, NS-MOVE^, NS-MOVE ;n3 , NS-MOVE fl! i, NS-MOVE a! - 2 , 
NS-MOVE ai 3 and NS-MOVE„ a are all used to deal with the node movement events from different kinds 
of nodes. For example, rule NS-MOVE U( , depicts that an active transmitter located at I moves to I' during 
its transmission over channel c with radius r. Then the behaviors of surrounding nodes can be divided 
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Table 5. Labelled Transitions for Networks - Begin transmission and time passing event 
"^a [NS-OUT] Q: "'- Q - gg^ ^ [NS-INJ 



, , c!v:«p,r] r , L w vu J c?v:S[l',i , 
T>n[P]= r > n [A]f r T>n[Q]f r ^n[Q']^ r 

Q ^ Q ' T| '^ [NS-IN 2 ] W>£*f [NS-IN3] 

T>n[Q]- r — >n[Qi]l T >n[Q]j; r — >n[Q]- r 

y [Q f , Q „ C [NS-PASS] [NS-NU LL ;nl ] 

Tt>n[Q]<; r — >n[Q']f; r T>0 L^ 

c?v:5[l,r] c!v:«[l.r] 

=^ [NS-NU LL paM ] t> Ni >n t>n 2 -^n 2 [NS _ CQM] 

T>0— >0 Tl>Ni|N 2 ' > N' 1 |N / 2 

T>N 2 |N! c!v:g| ' ,rl > N 2 |Ni 

T>Nl ^L> N , t>n^% [ns _ j t^An; t>n 2 An> 2 [ns _ syn] 

t>n 1 |n 2 ^Un;,n' 2 t>Ni|n 2 -^>n' 1 |n 2 



into three different cases corresponding to NS-MOVE,„i, NS-MOVE„,2 and NS-MOVE,„3 respectively. 
(1) For non-active nodes and active receivers that are receiving over other channels or that are always in 
or out of the transmission cell, they will remain unchanged. (2) For active receivers that are originally 
within the transmission cell, but later beyond it, they will receive an error. (3) For active receivers that 
are in the reverse situation, they will get interference. Analogously, rule NS-MOVE a ,i, NS-MOVE a ,3 
and NS-MOVE a ,2 have described the possible scenarios of an active receiver that moves from I to I': (1) 
if the active receiver moves out of the transmission cell, it will obtain an error; (2) if the active receiver 
has always been within the transmission cell and there is no more transmission in I', it will continue 
to receive data normally; (3) if there are more transmissions in I' apart from its original one, the active 
receiver will get interference. Finally, we can see from NS-MOVE„ a that for non-active nodes, they can 
move arbitrarily without conditions and limitations. 

Moreover, rule NS-PASS represents the responses of nodes as time goes by. Rule NS-NULL,-„i, NS- 
NULL/,,2 and NS-NULL pasv allow the empty network to receive data and evolve with time. At last, the 
propagation of events through networks is portrayed by rule NS-COM, NS-MOVE, NS-INT, NS-COM;„, 
NS-MOVE;„, and NS-SYN. The first three denote that an event generated in a network is propagated to 
the parallel network; while the later ones indicate that two parallel networks receive the same event. 

5 Harmony Theorem 

The Harmony Theorem aims at proving that the LTS-based semantics coincides with the RST-based 
semantics. With this objective, the theorem has three parts. First, it shows that the structural congruence 
respects the LTS, i.e., application of structural congruence will not change the possible transitions. Then 
it demonstrates that the RST behaves the same as the LTS, i.e., each reduction in the RST has a corre- 
sponding transition in the LTS which makes the resulting networks structurally congruent. In the end, it 
testifies the converse also holds. 

Before proving the theorem, there are some auxiliary lemmas that portray the shape of processes able 
to perform a particular labelled transition, and the shape of the derivative processes (see the Appendix). 
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Table 6. Labelled Transitions for Networks - Node movement event 
^ [NS-MOVE ao ] 

T>n[<v)«.P]j; r U ' > n[<v)«.P]g >r 

(Q0AIQ)V(c^c')V(d(l,r)<r'0d(l,l")<r') r NC . MnvF i 
c'wi'-l")r'l L 1 ^- 3 lvl ^ vc mU 

T>n[Q]j; r > n[Q]f |f 

QeAIQ Q% g^l'/V [NS . MOVy 

T>n[Q]{; r ' ) n[Q']j; r 

QeAIQ Q^Q : d(l ; lO>.A d (l,r)< r ' [NS . MOVE ^ 3] 
T>n[Q]^ r K ' '- > n[Q']f T 

Q£W ^;^" T| " [ns-move.„] 

?^g?^f^[NS-MOVE„ 2 l ^.^ [NS-MOVE,,,] 
T>nlP|f,^„|P|;, [NS-MOVE„] ^-[nS-NULLm] 

1 J| ' r 1 J| ' r T>0 > 

c?[(l:l'),r] c![(l:l'),r] 

T>Nl ^- =^[NS-MOVE] U^KnIinJ NS-INT] 

T>Ni|N 2 > N' 1 |N / 2 1 11 

T>N 2 |Ni c!|(l:l ' ) ' rl > N^N^ T>N 2 |N! ^ N2IN; 

c?[(l:l'),r] , c?[CI:l'),r] 

T> Nl m ^ T>N 2 2 [ NS _MOVE„] 

T>Ni|N 2 — — ^Ni|N' 2 

where AIQ is the set of processes of the form (x) v 5 .P 



Theorem 1 (Harmony Theorem). Let N be a network, and T a set of active transmitters. 

(1) If T > N 4 N' and N = Ni, then there exists M[ such that T > Ni A N[ = N'. 

(2) (a) If To N ^l V r N', then To N c![(l:|,) ' rl > N' x = N'. 

(b) If T o N N', then there are v and 8 such that T O N c!v - 51l ' rl ) N' x = N'. 

(c) If T o N ■— > CT N', then T o N -A N' x = N'. 

(d) If T o N ^ N', then T o N -> N' x = N'. 

(3) For each item in (2), the reverse also holds. 

Proof. Now we prove the three points in sequence. 

(1) The equivalence is defined in terms of commutativity, associativity, and identity over the empty 
network. First commutativity is guaranteed since rule NS-COM, NS-MOVE and NS-INT are 
symmetric, and rule NS-COM ;n , NS-MOVE^ and NS-SYS are self-symmetric. Identity over the 
empty network conserves since, owing to rule NS-NULL,„i, NS-NULL m 2 and NS-NULL paM , the 
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Table 7. Extended Syntax for Processes 



pdef 


old processes 


[in(x).P] t Q input with timeout 


| C7.P 


delay 


Oc.P channel switch 


1 [e]Qi,Q 2 


choice 


H(1T) recursion 






where t is a positive integer greater than 



empty network can perform any labels of the form — — — : — and A, which serve as 
neutral element of parallel composition. Finally as the operations for parallel composition are 
associative and the network structure is always preserved, therefore associativity is also ensured. 

(2) As proofs for the four statements are similar, we only take (a) as an example, 
(a) The proof is by rule induction on the derivation of T > N ■— r N'. 

First we consider rule RST-MOVE-AO, the proof for this case is by induction on the size 
of I U J U K. The base case is I U J U K = 0, using rule NS-MOVE uo . In the inductive case, we 
randomly choose an element h from I U J U K. Remember that by the inductive hypothesis, we 

c![(l:l'),r] 

already have a transition with label — K Below are different cases according to which set 

h belongs to. Suppose h € I, then we can apply rule NS-MOVE ( „i since d(l,lj) < rAd(l',lj) < r 
from the premise of rule RST-MOVE-AO. Thus the desired transition can be proved using rule 

NS-MOVE. Suppose now h G J, we can use rule PS-IN err to derive (xj)^.Pj — ■» Pj{£/xj}, and 

c?[(l:l'),r] 

then rule NS-MOVE,,^ to derive a transition with label : — Hence the desired format can 

be arrived using rule NS-MOVE. Finally suppose h € K, we can use rule PS-TNi nter f ere to derive 

8 7 I 

(xk)v|j Pk — > Pk{-L/><k}- This transition can be lifted up to the network level using rule NS- 
MOVE,^ because d(l,l k ) > rAd(l',l k ) < r from the precondition of rule RST-MOVE-AO. Simi- 
larly, using rule NS-MOVE, we can get the desired transition. 

The proof is analogous for rule RST-CONT-MOVE, since (I, r, c) N"A 
(K, r, c) j^ai N" ensures that all the active input nodes satisfy the conditions of NS-MOVE,,,! . As for 
non-active input nodes, rule NS-MOVE,,,! can also be applied. 

Rule RST-CONGR can be simulated by the first part of the theorem. 

(3) The proof for (a) and (b) are based on Lemma 2 and Lemma 4 respectively. The proof for (d) is 
straightforward. Now we consider the proof for (c). 

The proof is based on Lemma 5. If I U J U K = 0, the desired reduction can be derived using rule 
RST-PASS-NULL and RST-CONGR. Otherwise, for each element i in I and for each element k in 
K, first apply rule RST-SENDING and RST-PASS-NA respectively, then employ rule RST-CONT- 
PASS and RST-CONGR to get the desired reduction. □ 

6 The Extended Language 

So far we have considered the subset of TCMN with only the operators that are necessary for com- 
munication. Now we present some extensions: a series of processes are added in Table 7, while the 
syntax for others remains the same. 

First of all, the input construct is replaced by the input with timeout construct in [in(x).P] l Q. This 
process is waiting for receiving a value, if the value arrives before the end of the t time units, the process 
evolves into an active receiver; otherwise, the process continues as Q. Process a.P stands for sleeping 
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Table 8. Extended Reduction Semantics 

[RST-BEGIN] 

Vh€lUJUK.d(l,l h )<r Vi€l.T||., c =0 VjeJ.T||., c ^0 

T>n[out<u).P]f r | n n h [nn(x h ).P h l t hQ h ]c jj n k [(x k )%.P k ]f ->f r 
' heluJ h h keK k ' k 

nKraul>^.P^ r |nni[(xi)^.P i ]^ i |nnj[rin(x j ).P j l t jQ j ]f | n n k [P k {±/x k }]f k , rk 

[RST-IN PUT-DELAY] [RST-TIMEOUT] [RST-PASS-DELAY] 

T>n[rin(x).Pl t Q]f; r t ^n[rin(x).Pl t -lQ]f : r T>n[rin(x).pVQ]f, r ^ tT n[Q]f, r T> n[ff.P]f; r ^° n[P]f r 

[RST-PASS-NA] [RST-SWITCH] [RST-IF-TRUE] [RST-IF-FALSE] 

P^DIQ _ , , D]c , D1C ' e=true e=false 

Tl>n[P]J; r ^n[P]<; r 1 > c - p kr ^ n ^Ji,r T>n[[e]Qi,Q 2 ]f^n[Qi]^ r T>n[[e]Qi,Q 2 ]f^n[Q 2 ]f r 

where DIQ is the set of processes of the form C7.P or [in(x).P] t Q 



for one time unit while > c.P represents a process that decides to switch its communication channel 
to c, and then continues as P. The construct [e]Qi,Q2 behaves as Qi if e = true and as Q2 otherwise. 
Here, e is a boolean value expression. Finally, H ( u ) denotes a process defined via a (possibly recursive) 

definition H(^) d = Q, with = \vt\, where it contains all free variables of Q. 

We only provide the addition of the new operators to the RST semantics, since this is the simpler one 
and the one that we will use in Section 7. However the operators can be introduced in a similar way into 
the LTS semantics. 

Before updating the RST semantics, a new structural congruence rule is appended: 

n[HO?)]f )r = n[Q{7^ /it}]^ if H(^) d = Q A |^| = \lt\ 
The additional reduction rules are shown in Table 8. Rule RST-BEGIN is as before, except that input 
is substituted by input with timeout. In RST-TIMEOUT, a timeout fires if no reception has started before 
the end of the current instant of time. For processes of the form [in(x).P] t Q and a.P, rule RST- INPUT- 
DELAY and RST-PASS-DELAY model the sleeping for one time unit respectively. Rule RST-PASS-NA 
is a modification of the former one: non-active processes other than those of the form [in(x).P] t Q and 
a.P have no reaction to the time passing event. Then the remaining rules are self-explanatory. 

7 Case Study 

We start this section by taking some MAC-layer protocols: CSMA and MACA/R-T as examples to 
show the expressiveness of our calculus. 

7.1 Carrier Sense Multiple Access 

The Carrier Sense Multiple Access (CSMA) scheme is a widely used MAC-layer protocol. In this pro- 
tocol, each device senses the channel (physical carrier) before its transmission. If the channel is free, the 
sender starts the transmission immediately; otherwise the device keeps monitoring the channel until it 
becomes idle and then starts the transmission. 
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We can easily model the carrier sense action of CSMA scheme by the process defined below: 

def 

Send(l,c,u) = [T|| )C = 0]out(u),(T.Send(l,c, u) 

Let us represent some reduction traces for a network where nodes adopt the CSMA protocol. These 
traces indicate that the CSMA protocol does not address the issue of node mobility. When an active 
transmitter moves to the reception range of an occupied receiver, any transmission of the intruding node 
may cause interference with the ongoing transmission. Similarly, if an active receiver moves in the trans- 
mission cell of another transmitter, the transmission of the new transmitter will also interfere with the 
original one. Further, interference may as well occur when different packages are targeted at the same 
receiver simultaneously. 

Example 1 (Interference). This example represents an active transmitter ri3 moves to n 3 during its corn- 




Figure 1: Network topology of Lemma 1-2 and Example 1-3 

munication with node 114. Due to this event, the active receiver n 2 which is receiving data from node ni 
gets an interference since it passively enters the transmission cell of n 3 . The network is: 

N^mKvi)*]^ I n 2 [(x 2 ) v 5 J.P 1 ]f 2 , 2 I n 3 [(v 3 ) s % r3 | ru^.P^^ 

where n 2 and n 3 are in the transmission cell of ni, just as 114 in 113, ni and n 2 together with n4 in n' 3 (as 
shown in Fig.l). 

We present a possible reduction trace, and it is easily understood. 

Analogously, if 113 is an active receiver and moves to n 3 during its reception from 114. Then the transmis- 
sion of ni to n 2 will also interfere with ri4 to n 3 . □ 

Example 2 (Interference). This example indicates interference caused by the simultaneous transmission 
of two different packages. Let us consider now a different network: 

N d ^ f n 1 [Send(li,c,u 1 )]f ljri | n 2 [Send(l 2 ,c, u 2 )]f 2 J2 | n 3 [in(x).P]|j jia 

where n 2 and n' 3 are in the transmission cell of ni, just as ni and n 3 in n 2 (see Fig.l). 
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Table 9. MACA/R-T 



SND(sid,rid, 


def 

u) => c rr jd.out({sid,rid,rts,?{sid,rid,end,u)U). 




> c= rid - Tin fx). 




fst(x) = rid A snd (x) = sid A trd (x) = ctsl 

L V / V / \ / J 




> c SjS i d .out({sid,rid,end,u}). > c r . sid , 




SND sid, rid, u)] 1 




SND(sid,rid,u) 


r\Vw v (ja , q j — 


1 lr H x J- 




[sna (X) — la /\ ira [xj — rtsj 




l> Csid .OUI\-jJU, TSI^XJ , CIS, \IU[X) }/. 




> c s f st( - x v rin(y)- 




[snd(y) = idAfst(y) = fst(x) Atrd(y) = end] 




RCV(id,push(q,fth(y))), 




>c riid .RCV(id,q)] t 




> c r , id .RCV(id,q), 




RCV(id,q)] t 




RCV(id,q) 



A possible reduction trace is given: 
0>N^n 1 [out(u 1 }]f iri |n 2 [Send(l 2 ,c,u 2 )]f 2ir2 |n3[in(x).P]j; jr3 ^ f N 1 

0>Nx n 1 [out(ui}]f i ri |n 2 [out(u2>]f 2ir2 |n3[in(x).P]f, r3 d ^ f N 2 
Assign vi = [[[ui]]] and 5i = £uij, then 

0>N 2 ^f ijri ni[(v 1 > 5 1 ]f iiri |n 2 [out(u 2 }]j 2ir2 |n 3 [(x) v 5 ;.P]f, ir3 d l f N3 
Assign v 2 = [[[u 2 ]]] and 82 = £u 2 ], then 

{(ll,il,c)}>N3^ni[(vi>&]f iiri |n 2 [(v 2 >&]f 2jIS |n 3 [P{±/x}]f, jIS 

Here ni senses the channel free, and then almost at the same time, ri2 also finds the channel available, so 
they begin to transmit data successively. Therefore an interference is generated at n 3 . □ 

7.2 MACA/R-T 

The Receiver-Transmitter-Based Multiple Access with Collision Avoidance Protocol (MACA/R-T) is a 
promising protocol used in MANETs. In MACA/R-T, all mobile nodes in the network agree to a set 
of pre-specified channels, e.g., a node id is assigned with c r j d and c S) j d as its receiver and transmitter 
channels respectively. At the idle stage, all nodes will tune their receivers to their own receiver channel. 
When node sid wants to send a data package to node rid, node sid first sends a short control packet RST 
(request-to-send, which includes the sender id, the receiver id and the transmission duration of the data 
package) to node rid over channel c r r i d and then tunes its receiver to channel c Sjl .j d to wait for a control 
packet CTS (clear-to-send, which includes the same duration information) from node rid. Upon receiving 
the RTS, node rid will send a CTS over channel c s r j d and tune its receiver to channel c S)S j d for the data 
package. Finally, node sid receives the CTS and sends the data package to node rid over channel c s s j d . 

In Table 9, we provide an encoding of a sender and a receiver process in our TCMN with respect to 
the MACA/R-T protocol. We assume that the receiver has a queue to store the received packages, with 
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an operation push to insert an element. We also use four-tuples as values, with constructor {_, _, _, _} and 
destructors fst, snd, trd and fth, retrieving the first, second, third and fourth component separately. We 
indicate with t the maximum time for a data package from the sender to arrive at the receiver. 

The sender process SND(sid, rid, u) runs at node sid and intends to transmit the value u to node rid. 
The process first switches its transmitter channel to c r r jd and then sends a RTS packet. After that, it waits 
for the CTS packet. If the CTS packet is not received before the end of the t time units, the process will 
move to itself and restart the transmission. On the other hand, if the CTS packet is received before the 
timeout, the data package {sid, rid, end, u} is transmitted over channel c S)S id and the sender finishes the 
transmission. 

The receiver process RCV(id,q) is supposed to run at node id waiting for a RTS packet. If the RTS 
packet, with destination id, arrives before the timeout, the receiver switches its transmitter channel to c s .id 
and then replies with a CTS packet as well as waits for the data package over channel c s w x \. Otherwise, 
the receiver aborts the current reception and resets to process RCV(id, q). 

We show below that the MACA/R-T protocol is robust against node mobility, i.e., node movement 
will not give rise to communication interference. When an active transmitter moves to the reception 
range of an occupied receiver, the transmission of the intruding node will not interfere with the ongoing 
one. Besides, if an active receiver moves in the transmission cell of another transmitter, the transmission 
of the new transmitter will not interfere with the original one. 

Lemma 1 Suppose when node ni is transmitting to node ri2 and node ri3 is transmitting to node ru, 113 
moves to n 3 . The network topology is shown in Fig.l, ri2 and n 3 are in the transmission cell of ni, just 
as ri4 in 113, ni and ri2 together with 114 in n 3 . Then the transmission of n 3 to ru will not interfere with 
that of ni to ri2- 

Proof. Remember that only when an active receiver has received more than one transmission over the 
same channel, does the receiver get interference. 

There are three kinds of packages in the MACA/R-T protocol: RTS, CTS and data, which are trans- 
mitted over channels c rr jd, c s r id, and c ss jd respectively. According to the package types that ni and 113 
are sending, all the possible cases of the active transmitter 113 moves to n 3 are listed in the table below. 

We can see that when an active transmitter (e.g., 113) moves to the reception range of an occupied 



r>3 - 


-■> ri4 


n 3- 


-■» ri4 


ni - 


-■» ri2 


Interference at r\2 


Reasons 


Cr,ri4 


RTS 


Cr,ri4 


RTS 


Cr,ri2 


RTS 


No 


Different channels 




RTS 


^r,ri4 


RTS 


Cs,ri2 


.CTS 


No 


Different channels 




RTS 


^r,ri4 


RTS 


Cs,ni 


.data 


No 


Different channels 


Cs,ri4 


.CTS 


Cs,ri4 


.CTS 


Cr,ri2 


RTS 


No 


Different channels 


Cs,ri4 


.CTS 


Cs,ri4 


.CTS 


Cs,ri2 


.CTS 


No 


Different channels 


Cs,n 4 


.CTS 


c s,ri4 


.CTS 


Cs.ni 


.data 


No 


Different channels 


C s ,n 3 


.data 


C s ,n 3 


.data 


Cr,ri2 


RTS 


No 


Different channels 


c s,n 3 


.data 


c s,n 3 


.data 


Cs,ri2 


.CTS 


No 


Different channels 


c s,n 3 


.data 


c s,n 3 


.data 


c s,ni 


.data 


No 


Different channels 



receiver (e.g., 112), due to the different tranmission channels, the transmission of the intruding node will 
not interfere with the ongoing one. □ 

Lemma 2 Suppose when node ni is transmitting to node ri2 and node ri4 is transmitting to node 113, 113 
moves to n 3 . As shown in Fig.l, ri2 and n 3 are in the transmission cell of ni, just like 113 and n 3 in 114. 
Then the transmission of ni to ri2 will not interfere with that of ru to n 3 . 

Proof. The proof is similar to the one for Lemma 1, and we conclude that if an active receiver (e.g., 113) 
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moves in the transmission cell of another transmitter (e.g., ni), the transmission of the new transmitter 
will not interfere with the original one. □ 

Nevertheless, in the MACA/R-T protocol, interference may still occur when different RTS packets are 
targeted at the same receiver simultaneously. 

Example 3 {Interference). Let's consider the network: 

N d ^ f n 1 [SND(n 1 ,n3,u 1 )],;;j | n 2 [SND(n 2 , n 3) u 2 )]^ | n 3 [RCV(n 3 , [ ])]^ 

where n 2 and n' 3 are in the transmission cell of ni, as ni and n 3 in n 2 (see Fig.l). 
Here we present a possible reduction trace: 

> N '-><->-<->f :r " 3 '-k' " 3 

li.ri l 2 .r 2 

Initially, ni tunes its receiver to channel c nn3 and sends a RTS packet to n' 3 . Almost at the same time, 
n 2 also tunes its receiver to channel c r n3 and sends a RTS packet to n 3 which unfortunately results in an 
interference at n 3 . □ 

8 Conclusions and Future Work 

In this paper, we have proposed a timed calculus for mobile ad hoc networks paying particular atten- 
tion to local broadcast, node mobility and communication interference. Then the operational semantics 
of our calculus is given both in terms of a Reduction Semantics and in terms of a Labelled Transition 
Systems. We have also proved that these two semantics coincide. Finally, we extend our core language 
by adding some new operators to model the CSMA and MACA/R-T protocol. And we have demon- 
strated that the former doesn't address the issue of node mobility while the latter is robust against node 
mobility. 

In the future, a quantity of developments are possible. First, we would try to establish adequate 
Behavioral Equivalences which define when two terms have the same observable behavior. One possible 
approach is via UTP method, so as to investigate the denotational semantics for mobile ad hoc networks. 
Second, we would also like to study a set of algebraic laws, which can represent the features of mobile 
ad hoc networks. 
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A Appendix 

Lemma 1. If T > N c?[(l: '' ) ' rl > |\|', then 

N = Ilni[(xi)*.Pi]j; | n n j[( x j)v- p j]LI II n k [(x k )tP k ]f 
iel jeJ 11 keK 

where Vi G l.d(l,li) < rAd(l',li) < r, Vj G J.d(l,lj) < rAd(l',lj) > r, Vk € K.d(l,l k ) > rAd(l',l k ) < r 

and (I, r, c) | ai l\T A (l',r,c) jf ai N". Furthermore 

N' = nni[(xi)*.Pi]{; ri |nnj[Pj{e/xj}]f r J n n k [P k {±/x k }]f k |N" 
iel jeJ J ' keK 

c?[(l:l').r] 

Proof. The proof is by rule induction on the derivation of T > N : — — > N'. 

Rule NS-MOVEi„i From the premise of the rule, we know that either n[Q]f r is a non-active input node 
or an active input node that always within or beyond the mobile transmitter's transmission range. In 
the first and third case, the corresponding node can be inserted into N", while in the second case, 
Q = Q' = (xi)*.Pj, thus it follows that I = {i}, J = K = 0, and N" = 0. 

?£ 

Rule NS-MOVEj„2 Here too we know that Q is an active input process and Q — ■» Q', thus by inspection 
on the LTS for processes, we get one case, rule PS-IN^. It corresponds to index Q with j G J. 
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Rule NS-MOVEm Similarly, when Q is an active input process, then Q — > Q' can only be derived using 
rule RS-lNinter/ere. Hence, Q is indexed with k € K. 

Rule NS-MOVEi n This is the inductive case. It brings the corresponding sets of indices and the non-index 
part of the network in the previous premises to the desired form. □ 

Lemma 2. If T > N — h J > N', then 

N = n[(v)*.P]f )r |nni[(xi)*.Pi]J; )n | n "j [(xj )^ . Pj]- | n n k [(x k )£.P k ]f k!r JN" 
'iel jGJ 1 ' keK 

where Vi G l.d(l,li) < rAd(l',lj) < r, Vj G J.d(l,lj) < r Ad(K, lj) > r, Vk€ K.d(l,l k ) > rAd(i',l k ) < r 
and (l,r,c) J^N" A (l',r,c) # a iN". Furthermore 

N' = n[(v) 5 .P]f |nni[(xi)^P^ |nnj[Pj{e/xj}]f | n n k [P k {L/x k }]f k |N" 
' iel jGJ ' ' keK 

Proof. The proof is similar to the one for Lemma 1 , and it uses Lemma 1 itself to handle premises which 
are input transitions. □ 

Lemma 3. If T > N |\|', then 

NEEnn i [in(x i ).P i ]^|nnj[in(x j ).P j ]^ | U nkKx^.P^JN" 
iel JgJ ' ' kGK 

where Vh G I U J U K.d(l, l h ) < r, Vi G I.T||. iC = 0, Vj G J.T|i jiC / and (I, r,c) ^N". Furthermore 

N / ^nni[(x i ) v 5 .P i ]^ | |nn j [in(x j ).P j ]F | n n k [P k {J_/x k }]^ r JN" 
iel jGJ ' ' keK 

Proof. The proof is similar to the one for Lemma 1, using rules for begin transmission event. □ 

Lemma 4. If T > N c!v:5M > N', then 

NEEn[out(u).P^|nni[in(x i ).P i ^ r| |nnj[in(x j ).P^ | n n k [(x k ) v ^.P k ]j; r J N" 
iel jGJ " ' keK 

where Vh G I U J U K.d(l, l h ) < r, Vi G l."T|,. c = 0, Vj G J.T|| J)C ^ and (I, r,c) ^N". Furthermore if 
[[[u]]] = v and = 8 then 

N' = n[{v) 5 .P]^ r |n n i[( x i)v- p i]f;,r i l 11 n j[' n ( x j)- p j]h, rj l n n k [P k {L/x k }]f kjr JN" 
'iel jGJ ' 'keK 

Proof. The proof is similar to the one for Lemma 2, and it uses Lemma 3 itself to handle premises which 

are input transitions. □ 



Lemma 5. If T > N A N', then 



N = nni[<Vi)«.Pi]S; |nnj[(xj)3.Pj]F | n n k [P k ]f k , rk 
iel jGJ ' ' keK 

where Vi G > and Vj G J.<5j > 0. Furthermore 

N' = nni[(vi} S '- 1 P i ]fJnn j [(xj)t^iLI n nk[ p k]U 
iel jGJ ' ' keK 

Proof. The proof is by induction on the size of I U J U K, and then for each case it is similar to the one 

for Lemma 1 , using rules for time passing event. □ 



